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load/insert data into table with encryption 
column(s) and owner(s) specified using 
extended SQL 
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RDBMS generates working key Ks for encryption 
column and encrypts it using the column o\Amer's 
public key. The encryption result is stored Into the 
security catalog. 
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Data entries in the encryption column are encrypted 
using data encryption key Ks 
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The ciphertext of the encryption column, together 
with the plaintext of the other column(s), if any, 
is written into disk 
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Figure 2 
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User issues query that involves encrypted column, 
together with the user's private key, using extended 
SQL 
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The ownership of the user for the encrypted column 
is checked using the Information in the security catalog 
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The correctness of the private key is verfied 
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Query is denied 
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The priviate key is used to decrypt the encrypted 
data encryption key Ks in the security catalog 
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Key Ks is used to decrypt the encryption column 
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The query is processed as normal 



340 



345 



Query answer is returned 
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Figure 3 



